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FOREWORD 


This  docuaent  is  based  on  a  paper  presented  at  Che  thirty-seventh 
'  annual  aeetlng  of  the  Institute  of  Navigation,  June  9—11 ,  1981,  at 
Annapolis,  Maryland.  This  paper  la  based  upon  navigation  systea 
engineering  studies  perforaed  by  MITRE  for  the  FAA's  Systeas 
Research  and  Developaent  Service,  The  contents  of  this  paper 
reflect  the  views  of  the  author  and  do  not  necessarily  reflect  the 
official  views  or  policy  of  the  FAA, 
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1.  INTRODUCTION 


The  Federal  Aviation  Administration  is  evaluating  alternative 
radio  navigation  ayateaa  for  civil  aviation  In  the  post-199S 
t  lae  period.  The  ayateaa  under  consideration  lor  COWS 
navigation  are  LORAN-C,  VOR/DME,  and  NAVS7AR  ?■? S.  Reliability 
of  a  candidate  ayatea  haa  been  adopted  as  one  ol  the  evaluation 
criteria.  This  paper  deacrlbea  a  technique  for  evaluating  the 
reliability  of  LORAN-C  over  the  CONUS. 

The  reliability  analyala  of  the  network  of  LORAN-C  around 
stations  for  civil  aviation  la  concerned  witn  tne  anility  of  the 
LORAN-C  svstea  to  provide  continuous  and  usa*>  par!  git  lot 
signals  for  airborne  eppl icat Ions.  Cover*.;-  is  deified  bv 
transmitted  signal  strength,  geometric  relationship  between  the 
user  and  the  ground  stations,  and  the  receiver  capabilities.  In 
the  event  of  failure  of  one  or  aore  of  the  around  stations, 
there  would  be  an  outage  if  there  are  not  enough  regaining 
stations  satisfying  the  coverage  criterion. 

There  are  several  aspects  to  LORAN-C  systen  reliability  that 
affect  the  Interpretation  of  results.  These  Include  the  site  of 
the  area  affected  by  an  outage,  location  of  the  user,  and 
receiver  design  capabilities.  LORAN-C  is  a  long-ranee 
navigation  ayatea  and  therefore  an  outage  of  a  single  critical 
station  may  diminish  the  syatea  coverage  area  significantly.  If 
there  are  a  large  nuaber  of  users  of  LORAN-C,  the  operation  of 
the  civil  air  traffic  control  system  would  be  adversely 
effected.  Another  aspect  of  the  LORAN-C  system  reliability  Is 
that  it  Is  location  dependent,  due  to  the  variation  of  coverage 
across  the  CONUS.  The  LORAN-C  system  reliability  also  depends 
heavily  on  the  operational  capabilities  of  the  receiver  set 
elnce  receiver  capabilities,  such  as  the  master  Independent  mode 
and  low  acquisition  SNR,  affect  system  coverage  directly.  For 
example,  a  receiver  that  acquires  at  a  lower  SNR  generally 
yields  a  wider  selection  of  usable  triads  and  therefore  better 
system  reliability  through  ground  station  redundancy. 
Furthermore,  a  receiver  capable  of  master  independent  ode  can 
usually  reconfigure  itself  to  provide  navigation  In  the  event 
that  the  master  station  currently  used  by  the  receiver  for 
position  determination  fails. 

Previous  analyses  on  the  systea  reliability  nf  navigation 
systems  have  been  presented  for  LF/VLF  navald-  'Reference  1), 
LCRAN-C  (Reference  1,  2)  and  CPS  (Reference  1  .  In  Reference  1, 
a  probabilistic  method  is  given  to  analyze  the  rl A  associated 
with  the  loss  of  transmission  of  the  LF/VLF  mvalds.  However, 
signal  strengths  and  geometric  properties  of  the  LF-VLF  navaids 
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are  not  considered*  The  applicability  of  the  eethod  In 
Reference  (1)  le  e Iso  United  to  certeln  flight  durations. 
Reference  (2)  le  concerned  with  the  eetlaetlon  of  the  number  of 
eddltlonel  CONUS  etstlons  needed  for  providing  redundant 
coverage.  The  probabilistic  measure  of  system  reliability  is 
not  Included.  The  reliability  model  presented  herein  Is  similar 
to  that  for  CPS,  given  In  Reference  (3),  in  that  a  Markov  Chain 
model  Is  utilised.  The  formulation  of  the  model  Is  different 
since  the  receiver  designs  and  coverage  criteria  for  the  two 
ays tea a  are  different. 

Section  2  presents  an  overview  of  the  analysis  technique. 

Section  3  describes  the  computerised  LORAN-C  coverage  model 
which  la  used  extensively  In  the  reliability  analysis.  Section 
A  describes  the  probabilistic  approach  to  reliability  analysis. 
The  overall  methodology  for  the  analysis  of  LORAN-C  system 
reliability  In  tha  CONUS  la  Illustrated  In  Section  5  by  an 
example  using  a  previously  proposed  station  configuration  for 
ful 1-CONUS  coverage,  a  simplified  low-cost  airborne  receiver 
model,  and  the  station  reliability  statistics  based  on  a 
preliminary  analysis  of  the  ground  station  data.* 


*  Presently,  detailed  analysis  Is  being  performed  on  the  actual 
ground  station  reliability  data,  to  be  used  In  the  reliability 
analysis. 
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2.  OVERVIEW  OF  ANALYSIS  TECHNIQUE 

Figure  1  deplete  the  overall  technique  end  the  required  Inpute 
for  the  enelyele  of  LORAN-C  eyetea  reliability  In  the  CONUS. 
Three  aajor  Inpute  ere  required  for  thle  enelyele;  namely,  the 
LORAN-C  station  configuration  for  full  CONUS  coverage,  receiver 
aodel,  and  etatlon  reliability  parameter?  In  the  fora  of  MTBP 
(Mean-Time-Between-Failure»)  end  MTTR  (Mean-Tlae-To-Reetore) . 

The  station  configuration  la  specified  by  the  locatlona, 
radiated  powera,  chain  identification,  end  aeater/eecondery 
categorization  of  the  etetlone. 

The  receiver  aodel  ehovn  in  Figure  1  Is  used  to  represent  those 
features  of  the  receiver  which  have  a  significant  lapact  on  the 
system  coverage.  The  description  of  the  receiver  aodel  Includes 
the  following: 

o  Hyperbolic  or  aultl-rho  navigation  mode 
o  Master  Independent/dependent  for  the  hyperbolic  mode 

o  Cross-chain  capability 

o  Minimum  receiver  slgnal-to-nolse  ratio  (SNR) 

o  Back-up  navigation  node. 

The  first  step  In  the  analysis  Is  to  identify  the  coverage,  In 
terns  of  the  aet  of  usable  triads,  at  regularly-spaced  locations 
throughout  the  CONUS,  based  on  a  particular  receiver  aodel  and 
station  configuration.  This  la  accomplished  by  aeans  of  a 
computerized  coverage  model  (Section  3). 

The  next  step  la  to  exaalne  the  geographic  Impact  of  station 
outages  on  LORAN-C  coverage  area  for  the  specified  station 
configuration  and  receiver  model.  This  la  shown  In  Figure  1  as 
the  deterministic  component  of  the  reliability  analysis.  In 
this  approach,  the  effect  of  an  outage  of  a  single  station  Is 
first  evaluated.  Since  the  areas  of  redundanc  coverage  result 
in  higher  system  reliability,  areas  of  redundant  and 
nonredundant  coverage  In  the  CONUS  are  also  identified. 

The  probabilistic  analysis  of  LORAN-C  systea  reliability  Is 
concerned  mainly  with  the  assessment  of  the  risk  of  the  loss  of 
LORAN-C  coverage  over  various  time  intervals.  The  reliability 
and  maintainability  performance  of  the  ground  stations  are 
accounted  for  In  the  analysis  by  the  parsmeters  MTBF  and  MTTR  of 
the  stations.  The  evaluation  technique  la  based  on  the  Markov 
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Chain  aodel.  Usually  one  aodel  needs  to  be  developed  at  each 
location  because  LORAN-C  coverage  varies  from  one  location  to 
another.  However,  an  alternative  procedure  Is  developed  In  this 
paper  to  simplify  the  overall  systea  reliability  calculations. 


I.  LORAN-C  COVERAGE  MODEL 

A  computerized  coverage  model  has  been  developed  to  analyze  the 
adequacy  of  LORAN-C  coverage  for  arbitrary  station 
configurations,  receiver  capabilities,  and  system  parameters. 
This  model  essentially  evaluates  the  coverage  at 
regularly-spaced  geographic  points  throughout  the  CONUS.  For  a 
geographic  location  to  have  LORAN-C  coverage,  a  minimum  of  three 
stations*  must  be  available  that  meets  the  following  conditions: 

(1)  Signal  strength  from  each  of  the  three  stations  yields 
at  least  a  specified  minimum  slp.nal-atmospheric 
nolse-ratlo  at  the  receiver.  This  level  mainly 
concerns  the  ability  to  acquire  the  signals. 

(2)  Geometric  relationship  between  the  receiver  location 
and  the  triad  is  satisfactory.  This  relationship  is 
known  as  Geometric  Dilution  of  Precision  (GDOP).  The 
expression  and  derivation  of  this  measure  can  be  found 
In  Reference  4. 

To  evaluate  the  first  condition,  signal  strengths  at  the 
receiver  location  from  all  ground  stations  are  computed.  This 
requires  the  computation  of  the  propagation  loss  of  the  LORAN-C 
signal  gound  wave  from  Its  transmitting  source  to  the  receiver 
location.  The  exact  calculation  Is  complex  because  It  depends 
on  a  variety  of  factors  such  as  ground  conductivities,  terrain 
variation,  and  atmospheric  condition  along  the  propagation  path 
(Reference  5).  To  make  the  propagation  model  tractable,  It  has 
been  assumed  that  the  signal  attenuation  depends  only  on  the 
ground  conductivities.  The  ground  conductivities  of  the  CONUS 
are  approximated  by  dividing  the  CONUS  Into  cells  of  average 
conductivity  values.  For  propagation  over  a  path  of  constant 
conductivity,  the  signal  attenuation  curve  as  a  function  of 
distance  Is  employed  (Reference  6).  Since  the  propagation  may 
be  over  mixed  conductivity  paths,  the  Millington  method  It  seed 
(Reference  5). 

The  noise  calculation  procedure  used  In  the  coverage  model 
follows  that  of  the  CCIR  (Reference  7).  The  noise  source 
considered  is  the  atmospheric  radio  noise.  A  detailed 
discussion  on  the  CCIR  procedure  can  be  found  In  Reference  (2). 
The  application  of  the  CCIR  procedure  yields  the  95-percentlle 


*  The  multl-rho  mode  of  navigation  Is  not  addressed  in  this  paper. 
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value  of  Che  nolee  power  for  eech  4-hour  tine  block  of  the  day 
and  for  each  season.  The  noise  power  In  the  tine  blocks  of  the 
suaaer  season  Is  on  the  average  higher  than  those  of  the  other 

seasons. 

For  civil  aviation,  system  coverage  is  required  for  all 
seasons.  Therefore,  the  noise  power  in  the  SNR  calculation  is 
conservatively  based  on  the  average  of  the  noise  powers  (95Z)  of 
the  six  tine  blocks  in  the  suaaer  season. 


RELIABILITY  ANALYSIS 


The  reliability  of  the  LORAN-C  system  to  provide  coverage  is 
dependent  upon  the  uaer'a  location  within  the  CONUS.  Therefore, 
the  overall  reliability  aaseaanent  of  the  LORAN-C  ayatem  will 
require  the  reliability  analysis  at  individual  locations  within 
the  CONUS.  This  approach  is  the  saae  aa  the  NAVSTAR  GPS 
reliability  analysis  (Reference  3). 


4.1  Reliabllty  Model 


This  section  discusses  the  technique  developed  for  evaluating 
the  system  reliability  of  LORAN-C  at  a  given  location.  The  main 
objective  is  to  calculate  the  probability  of  a  system  outage 
during  a  specific  tine  period.  This  technique  deviates  from  the 
previous  methods  (References  1  and  3)  in  that  signal  strength 
limit,  geometry,  and  receiver  capability,  such  as  master 
Independent/dependent  modes  and  minimum  SNR,  are  taken  into 
account.  Similar  to  Reference  3,  a  Markov  Chain  model  is 
utilized,  but  the  formulation  of  the  model  is  different  due  to 
the  above  considerations. 


figure  2  illustrates  the  Markov  Chain  model  used  for  analyzing 
LORAN-C  system  reliability.  One  of  the  Inputs  to  this  model  is 
the  combinations  of  triads  that  satisfy  the  coverage 
requirement.  Without  loss  of  generality,  let  N  be  the  number  of 
usable  triads  and  M  be  the  number  of  stations  Involved.  In 
general,  N  is  smaller  than  the  combination  of  M  items  taken  3  at 
a  time,  due  to  geometry  and  SNR  restrictions.  Each  circle  in 
this  figure  denotes  a  state  in  the  Markov  Chain.  For  this 
model,  a  state  is  defined  as  one  of  the  possible  sets  of  usable 
triads.  The  tlme-to-fail  distribution  of  the  stations  is 
assumed  to  be  identical.  Independent,  and  exponential.  The 
tlme-to-restore  is  also  assumed  to  be  exponentially  distributed. 


Figure  2  describes  basically  the  sequential  deterioration  of 
system  coverage  from  the  initial  state  (left-hand  side  of 
figure)  to  the  outage  state  (extreme  right-hand  side). 

Initially,  all  N  triads  and  M  stations  are  assumed  to  be 
available.  After  a  small  Interval  of  time,  one  of  the  M  station 
fails  and  this  results  in  a  smaller  set  of  triads.  However,  at 
a  particular  state,  the  repair  of  the  affected  station  by  the 
maintenance  crew  reverts  the  system  to  the  previous  coverage 
state.  As  time  goes  on,  the  failure  of  the  stations  len ’s  to 
the  coverage  by  only  one  triad.  When  one  of  the  stations  in 
this  remaining  triad  falls,  a  system  outage  results. 
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REPAIR 


REPAIR 


Consider  the  case  In  which  a  given  location  Is  provided  coverage 
by  a  chain  of  4  stations.  A,  B,  c,  and  D,  where  A  Is  the  master 
station*  Figure  3  shows  the  Markov  model  for  the  master 
dependent  case.  The  top  half  of  Figure  3  depicts  the  failure 
paths.  It  can  be  noted  the  failure  of  the  master  station  leads 
to  an  outage  whereas  the  failures  of  two  secondaries  are 
required  for  system  outage.  The  bottom  half  of  Figure  3  shows 
the  complete  model  with  restoration  paths  Included.  In 
addition,  the  middle  three  states  (ACD,  ABD,  ABC)  In  the  top 
half  of  this  figure  have  been  combined  to  form  one  state  (1 
triad  working),  thua  reducing  computation  effort. 

The  case  Illustrated  is  an  example  of  nonredundant  coverage 
because  an  outage  of  a  critical  station,  the  master  In  this 
case,  causes  system  outage.  Figure  4  shows  a  case  of  redundant 
coverage.  In  which  5  stations  and  5  triads  are  Involved.  It  can 
be  observed  from  this  example  that  the  number  of  states  can  be 
quite  large  as  the  number  of  stations  and  triads  Increases. 

Analytical  solution  of  the  Markov  Chain  reliability  model  for 
cases  containing  more  than  three  or  four  states  Is  cumbersome . 
Therefore,  a  numerical  method  (Reference  8)  Is  used  to  derive 
unreliability,  which  is  defined  as  (1  -  reliability). 

4.2  Bounds  In  Reliability  Performance 

The  description  of  coverage  at  a  given  location  In  terms  of  the 
number  of  usable  triads  can  be  misleading  for  conveying 
reliability  performance.  The  reason  Is  that  some  stations  are 
more  critical  than  others  with  respect  to  their  contribution  to 
an  outage.  As  shown  previously,  for  the  master  dependent  mode, 
the  master  station  Is  more  critical  if  Its  chain  Is  the  only  one 
providing  coverage.  However,  the  failure  of  a  secondary  station 
In  this  chain  does  not  necessarily  lead  to  system  outage  if  the 
chain  contains  more  than  two  secondary  stations. 

The  term,  level  of  redundancy.  Is  used  here  to  quantify  the 
relative  reliability  of  coverage.  It  assigns  a  numerical  value 
to  each  coverage  type.  It  Is  defined  as: 

Level  of  redundancy  “  (Smallest  number  of  failed  stations 

leading  to  system  outage)  -  1 

Therefore,  the  coverage  by  one  chain  In  the  master  dependent 
mode  Is  assigned  the  redundancy  level  of  zero,  or  no  redundancy 
regardless  of  the  number  of  secondaries.  Redundancy  levels  of  1 
and  2  are  also  called  single  and  double  redundancy,  respectively. 
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STATIONS:  A,  B,  C,  D,  E 

TRIADS:  (ACD),  (ABD) ,  (ADE) ,  (ABC),  (BDE) 


The  Identification  of  redundancy  level  for  a  given  coverage 
requires  a  failure  node  analysis  of  the  usable  triads,  l.e.,  all 
possible  combinations  of  stations  leading  to  systea  outage. 

Since  the  Markov  Chain  aodel  of  Figure  2  describes  the  outage 
process,  it  can  be  used  directly  to  derive  the  redundancy 
level.  After  the  Markov  aodel  is  forauiated  for  a  particular 
coverage  situation,  visual  inspection  can  identify  the  smallest 
msaber  of  paths  (station  failures)  leading  to  outage.  For  the 
exaaple  in  Figure  4,  the  alnlaua  nuaber  of  etatlon  failures  la 
two  and,  therefore,  the  redundancy  level  la  1,  or  single 
redundancy. 

Since  each  location  can  be  characterized  by  a  level  of 
redundancy  and  aany  areas  share  the  same  value,  another  approach 
Is  to  find  the  reliability  bounds  corresponding  to  the 
redundancy  levels.  Most  likely  only  redundancy  levels  of  two 
and  less  need  to  be  considered  because  higher  levels  of 
redundancy  would  produce  aatlsfactpry  reliability  performance. 

Consider  the  zero  redundancy  case.  The  worst  reliability 
performance  for  this  case  la  when  only  three  stations  satisfy 
the  coverage  requirement,  l.e.,  when  one  of  the  stations  falls, 
a  system  outage  results.  The  top  half  of  Figure  5  shows  the 
block  diagram  of  this  scenario  as  a  series  connection  of  three 
stations,  as  well  as  the  corresponding  Markov  Chain  aodel.  The 
upper  bound  In  reliability  occurs  when  two  of  the  stations  each 
have  multiple  back-up  stations.  If  the  nuaber  of  back-up 
statlona  la  large,  the  portion  of  the  systea  as  represented  by 
the  dotted  lines  in  Figure  $  can  be  considered  as  approaching 
100  percent  reliability.  Therefore,  only  one  station  Is  useji  to 
represent  the  beat  case.  This  satisfies  the  constraint  of  the 
zero  redundancy  since,  by  definition,  the  failure  of  one 
critical  station  results  In  a  systea  outage.  It  should  be  ooted 
that  this  Is  not  a  physical  realization  of  coverage,  but  Is  used 
as  a  aatheaatlcal  bound. 

The  reliability  bounds  of  the  single  redundancy  case  Is  s^own  In 
Figure  6.  The  worst  scenario  Is  composed  of  two  Independent 
triads  such  as  two  separate  LORAN-C  chains.  This  is  a  minimal 
configuration  for  single  redundancy  because  the  fsllure  of  one 
station  from  each  triad  leads  to  an  outage  o*  that  triad  and 
that  each  of  the  six  stations  does  not  have  oackups.  When  the 
outage  state  Is  reached,  two  failures  have  occurred.  Since  It 
is  assumed  that  only  one  station  Is  restored  at  a  time,  the 
factor  of  two  In  the  restoration  path  Is  used  to  account  for  the 
restoration  of  either  one  of  the  felled  stations.  By  the  same 
argument  as  in  the  zero  redundancy  case,  the  best  scenario 
corresponds  to  the  parallel  combination  of  two  stations. 
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WORST  SCENARIO:  ONLY  3  STATIONS  ARE  AVAILABLE 


FIGURE  S 

BOUNDS  IN  RELIABILITY  PERFORMANCE- NO  REDUNDANCY 


Proceeding  similarly,  the  reliability  bounds  aa  represented  by 
Markov  Chain  aodela  for  :he  double  redundancy  caae  can  be  found 
and  they  are  shown  In  Plgure  7.  thla  procedure  can  be  similarly 
extended  to  higher  levela  of  redundancy*  It  can  be  noted  from 
Plgure  7  that  only  four  etatea  are  required  to  represent  the 
Markov  aodel.  Therefore,  the  computation  la  easily  aanageable. 
Another  property  of  these  derived  bounds  Is  that  they  are  not  a 
function  of  aaster  Independent  or  dependent  aodes,  thereby 
providing  further  savings  In  computation* 

The  reliability  bounds  can  be  used  In  the  following  fashion  to 
simplify  the  overall  LORAN- C  system  reliability  evaluation.  If 
the  upper  bound  of  the  reliability  performance  (l*e., 
reliability  of  best  scenario)  corresponding  to  a  redundancy 
level  does  not  satisfy  the  reliability  performance  criterion, 
then  every  geographical  location  with  this  level  of  redundarcy 
Is  unsatisfactory.  For  example,  If  the  reliability  of  the  best 
scenario  for  zero  redundancy  Is  judged  as  unsatisfactory,  then 
It  can  be  concluded,  without  further  calculation,  that  all  areas 
In  CONUS  with  zero  redundancy  are  unsatisfactory  In  reliability 
performance. 

On  the  other  hand.  If  the  reliability  of  the  worst  scenario  for 
a  particular  level  of  redundancy  provides  satisfactory 
reliability  perforaance,  then  all  locations  with  this  level  of 
redundant  coverage  can  be  considered  as  satisfactory  In 
reliability  perforaance.  Furthermore,  the  saae  conclusion  also 
applies  to  higher  levels  of  redundancy. 


FIGURE  7 

BOUNDS  IN  RELIABILITY  PERFORMANCE- DOUBLE  REDUNDANCY 


5.  APPLICATION 

TM*  section  Illustrates  the  reliability  analysis  precedure  with 
s  numerical  example,  based  on  a  previously  proposed  station 
configuration  for  full-CONUS  coverage,  a  slapllfled  aodel  of  the 
low-cost  receiver,  and  s  prellalntry  analysis  of  the  reliability 
data  froa  stations  with  solid-state  transaltters. 


Presently,  approxlaately  two-thirds  of  the  CONUS  are  provided 
with  LORAN-C  coverage.  Several  station  conf lguratlona  have  been 
proposed  to  cover  the  aid-continent,  which  is  currently  without 
LORAN-C  coverage.  One  past  proposal  was  to  Install  five 
additional  aid-continent  stations  to  fill  the  current  coverage 
gap.  The  locations  of  the  five  proposed  and  the  current  CONUS 
stations  are  shown  in  Figure  8.  The  radiated  power  of  the  five 
additional  stations  Is  assumed  to  be  the  same  as  the  aaxloua 
radiated  power  of  the  existing  solid-state  transmitting  stations 
(800  KV). 

The  receiver  aodel  used  In  this  analysis  la  assumed  to  be 
low-cost,  operating  only  in  the  hyperbolic  mode  with  master 
dependent  or  master  independent  capabilities.  The  minimum 
acquisition  SNR  Is  assumed  to  be  1/3  or  -10  dB.  The  equivalent 
receiver  noise  bandwidth  Is  assumed  to  be  20  KHz .  The  noise 
powers  In  the  CONUS  are  the  sane  as  those  of  Reference  2.  The 
accuracy  Halt  of  LCRAN-C  coverage  for  this  low-cost  type  of 
receiver  Is  taken  as  1500  feet  (2  dRMS)  with  standard  deviation 
of  TD  (tlae  difference)  error  0.1  usee.  This  corresponds  to  a 
maximum  CD OP  of: 

CD0P  -  dRHS/standard  dev.  of  TD 

■  750  ft/0.1  tisec. 

■  7,500  ft/ u  sec. 

The  MTBF  and  KTTR  of  the  stations  used  In  this  example  are  20 
days  and  9  minutes*,  respectively.  It  must  be  emphasized  that 
these  values  are  preliminary  estimates  and  used  for  Illustrative 
purposes  only. 


*  Transient  or  momentary  station  outages  that  last  less  than  a 
minute  are  not  Included. 
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5.1  Effect  of  a  Single  Station  Outage  on  Coverage  Area 


The  coverage  diagram  of  the  proposed  full-CONUS  coverage  station 
configuration  is  shown  in  Figure  9.  The  plotting  increment  Is 
two  degrees  in  latitude  and  longitude.  Blanks  within  the  CONUS 
boundary  denote  satisfactory  coverage.  The  symbols  'S,  ’G' ,  *E' 
and  are  used  to  identify  different  causes  of  coverage 
deficiency. 

'S'  denotes  inadequate  signal  strength  only.  'G'  signifies 
inadequate  GDOP  only.  indicates  either  a  signal  or  GDOP 

deficiency,  i.-*.,  there  exist  at  least  2  triads  at  this  location 
where  one  triad  satisfies  SNR  threshold  but  not  the  GDOP 
threshold  whereas  the  other  triad  has  the  opposite  deficiency. 

denotes  deficiencies  in  both  signal  and  GDOP.  It  can  be 
seen  from  this  figure  that  based  on  the  assumed  powers  of  the 
proposed  stations,  there  are  still  a  few  small  areas  without 
coverage.  The  difference  in  coverage  areas  for  the  master 
dependent  and  master  independent  modes  is  insignificant.  As 
indicated  in  Figure  9,  this  is  due  to  signal  strength 
limitation,  rather  than  geometry. 

Figure  10  shows  the  effect  of  an  outage  of  the  Seneca  LORAN-C 
station  on  the  CONUS  system  coverage.  The  Seneca  station  is  a 
dual-rated  station  which  serves  as  a  master  to  the  Northeast 
Chain  and  also  as  a  secondary  to  the  Creat  Lakes  Chain.  Since 
this  station  contains  equipment  common  and  necessary  for  the 
transmissions  of  the  two  rates,  such  as  antenna  and  power 
system,  the  outage  at  Seneca  can  impact  the  operations  of  the 
two  chains.  The  shaded  areas  of  Figure  10  show  the  areas  of  no 
coverage  as  a  result  of  the  Seneca  station  outage.  For  the 
master  dependent  mode,  the  area  affected  can  be  substantial, 
about  500  NMI  in  the  north  direction.  As  expected,  the  master 
independent  mode  is  superior  in  redundant  coverage  as  compared 
with  the  master  dependent  mode.  However,  the  area  affected  can 
be  close  to  300  NMI  in  one  direction.  Similar  conclusions  can 
be  drawn  concerning  the  effect  of  outage  of  the  dual-rated 
Malone  station.  Figure  11.  This  station  is  the  master  for  the 
Southeast  Chain  and  secondary  for  the  Creat  Lakes  Chain. 

Figure  12  presents  the  consequence  of  outage  of  the  Fallon 
station,  master  of  West  Coast  Chain.  Again,  the  aircraft  whose 
receiver  operates  only  on  the  master  dependent  mode  will  not  be 
provided  with  navigation  capability  in  a  large  portion  of  the 
western  CONUS.  However,  users  with  master  Independent  mode 
receiver  would  not  be  affected. 


FIGURE  10 

EFFECT  OF  SENECA  STATION  OUTAGE 


MASTER 
DIP  END  ENT 


MASTER 

INDEPENDENT 


I 


FIGURE  11 

EFFECT  OF  MALONE  STATION  OUTAGE 
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FIGURE  12 

-FFECT  OF  FALLON  STATION  OUTAGE 


In  summary,  the  addition  of  five  aid-continent  etatlona  of  the 
aasuaed  radiated  power  to  the  exlatlng  network  of  LORAN-C  ground 
etatlona  would  provide  nearly  full  coverage  to  the  CONUS  when 
all  ground  etatlona  are  operational*  However,  when  one  of  the 
CONUS  etatlona  falla,  a  large  area  of  aeveral  hundred  nautical 
allea  aay  be  devoid  of  coverage  and  uaera  In  theae  areaa  would 
be  without  navigation  aervlce  unleaa  additional  redundancy  la 
provided. 

5.2  Areaa  of  Redundant  Coverage 

For  convenience,  redundancy  In  coverage  la  defined  aa  the 
existence  of  at  leaet  one  uaable  triad  (satisfying  coverage 
criterion)  regardleaa  of  which  atation  falla.  Thla.aeana  that 
the  airborne  uaer  la  protected  agalnat  an  outage  due  to  the 
failure  of  a  alngle  ground  atation. 

Figure  13  ehowa  the  areaa  of  redundant  and  nonredundant  coverage 
within  Che  CONUS  for  the  neater  dependent  and  neater  Independent 
nodea  with  the  propoaed  five  additional  nld-contlnent  ground 
atatlons.  The  shaded  area  In  thla  Figure  ldentlflea  the  areaa 
of  nonredundant  coverage.  Aa  expected,  the  neater  Independent 
node  provldea  algnif leant ly  nore  redundant  coverage  areaa  than 
the  neater  dependent  node.  Approximately  50  percent  of  the 
CONUS  contalna  redundant  coverage  for  the  neater  dependent  node, 
whereaa  the  naater  Independent  node  provldea  75  percent  of  the 
CONUS  with  redundant  coverage. 

5.3  Illuatratlon  of  the  Probablllatlc  Analyst  a 

The  probability  of  ayaten  outage  within  a  tine  Interval,  or 
unreliability,  la  llluatrated  in  Figure  14.  In  thla  example, 
the  tine  interval  of  intereat  la  for  the  on  route  flight  segment 
and  hence  the  tine  acale  la  on  the  order  of  houra.  Similar 
reaulta  in  unreliability  performance  (i.e.,  aa  tine  Increases, 
unreliability  also  Increases)  aa  those  shown  In  Figure  14  have 
also  been  calculated  for  shorter  (on  the  order  of  nlnutes)  and 
longer  (on  the  order  of  days)  time  Intervals.  The  shaded 
portion  of  this  figure  indicates  the  unreliability  performance 
regions  for  the  zero  redundant  and  the  single  redundant 
coverage.  The  upper  and  lower  limits*  in  unreliability  for 


*  The  upper  and  lower  limits  In  unrellabllty  corresponds  to  the 
lower  and  upper  limits  In  reliability,  respectively. 
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these  two  types  of  redundancy  levels  have  been  calculated  using 
the  Harkov  Chain  models  shown  In  Figures  S  and  6.  It  can  be 
observed  that  unreliability  in  areas  of  single  redundancy  Is 
significantly  lower  than  that  of  the  zero  redundancy.  For  a 
flight  duration  of  five  hours,  the  average  unreliability 
(mld-polnt  between  the  worst  and  the  beat  scenarios)  In  area  of 
zero  redundant  coverage  Is  approxlnately  one  thousand  tines 
larger  than  that  In  area  of  single  redundant  coverage. 

Figure  14  also  displays  the  unreliability  for  the  master 
dependent  and  master  Independent  mode  when  the  coverage  la 
provided  by  a  chain  of  four  stations.  This  figure  shows  that 
the  master  Independent  mode  out  performs  the  master  dependent 
mode  In  reliability  by  a  factor  of  approximately  250.  It  can 
also  be  seen  from  this  figure  that  the  unreliability  of  a  four 
station  chain  In  the  master  dependent  mode  Is  almost  the  same  as 
the  best-  scenario  for  zero  redundancy. 

The  application  of  the  unreliability  bounds  such  as  those  shown 
In  Figure  14  to  facilitate  the  reliability  analysis  for  the 
entire  CONUS  has  been  discussed  In  Section  4.2.  An  alternative 
but  equivalent  procedure  Is  provided  as  follows.  This  Is  based 
on  the  assumption  that  a  threshold  for  unreliability 
(time-dependent)  has  been  pre-determlned  via  an  independent 
method  such  as  the  result  of  an  Investigation  of  the  reliability 
of  the  VOR  system  or  consensus  voting  among  experts.  The 
developed  unreliability  threshold  line  can  then  be  drawn 
directly  on  the  unreliability  curve  such  as  Figure  14  to 
determine  the  adequacy  of  reliability  for  various  redundant 
coverage  levels. 

Consider  the  example  of  the  redundant  coverage  provided  by  the 
proposed  station  configuration  and  the  receiver  capable  of 
master  independent  operation.  The  redundant  coverage  map  Is 
shown  In  Figure  13.  If  the  unreliability  threshold  line  Is 
above  the  unreliability  bounds  of  zero  redundancy,  then  It  can 
be  concluded  Immediately  all  redundancy  levels  (zero  and  higher) 
are  satisfactory  In  reliability  performance  throughout  the 
entire  CONUS. 

Consider  the  next  case  In  which  the  unreliability  threshold  line 
lies  between,  but  not  Intersecting,  the  unreliability  region  of 
zero  redundancy  and  that  of  single  redundancy,  then  the  shaded 
areas  In  CONUS  of  Figure  13  can  be  viewed  as  unsatisfactory  in 
reliability  performance.  However,  the  blank  areas  of  Figure  13 
with  redundancy  levels  of  one  and  higher  would  be  considered  as 
satisfactory  In  reliability  performance.  These  conclusions  are 
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drawn  a la pi 7  by  visual  observation  of  the  unreliability  bound a, 
without  resorting  to  computation. 

The  unreliability  threshold  line  aay  also  lie  Inside  the 
unreliability  region  of  a  particular  redundant  coverage  type. 
The  developed  unreliability  bounds  cannot  be  used  directly  to 
determine  the  adequacy  of  the  reliability  for  this  coverage 
level.  Instead,  the  generalised  Harkov  Chain  model  shown  In 
Figure  2  needs  to  be  applied.  However,  since  the  unreliability 
regions  of  higher  redundancy  levels  are  below  the  threshold 
line,  geographic  areas  with  higher  redundancy  levels  can  be 
concluded  as  satisfactory  In  reliability  performance. 


6.  SUMMARY  AND  DISCUSSIONS 


This  paper  has  described  an  analytical  technique  for  the 
asaessaent  of  the  LORAN-C  uystem  reliability  in  the  CONUS.  This 
technique  can  be  utilized  to  investigate  the  senaltlvlty  of 
LORAN-C  aystea  reliability  due  to  various  proposed  station 
configuration  scenarios  for  full-CONUS  coverage,  different 
airborne  receiver  models,  and  different  ground  station 
reliability  perfomance  paraaeters.  This  technique  has  been 
Illustrated  by  a  numerical  example. 

Currently,  the  FAA  Is  sponsoring  an  effort  to  develop  a 
laboratory  aodel  of  a  low-cost  General  Aviation  (CA)  receiver. 
The  planned  operational  capabilities  of  this  receiver  will  be 
Incorporated  In  the  future  analysis  of  LORAN-C  systea 
reliability.  A  data  reduction  and  analysis  effort  is  underway 
to  estimate  the  KTBF  and  MTTR  of  the  solid-state  stations  from 
the  historical  data  supplied  by  the  USCC.  The  HTBFs  of  the 
Individual  equipment  in  a  station  such  ss  antenna,  transmitter, 
end  power  system  will  also  be  extracted. 

The  ultimate  objective  of  the  LORAN-C  system  reliability 
assessment  Is  to  determine  the  ground  ststlon  configuration  that 
would  meet  the  civil  aviation  reliability  requirement  In  the 
post-1995  time  period.  The  determination  of  such  a 
configurstion  would  moat  likely  be  an  iterative  process  that 
a?.so  Involves  the  low-cost  GA  receiver  aodel.  A  particular 
station  configuration  scenario  for  CONUS  coverage  and  a  specific 
set  of  station  KTBF  snd  MTTR  are  initially  used  In  the 
analysis.  If  system  reliability  based  on  these  two  assumptions 
Is  found  to  be  unsatisfactory,  two  alternatives  can  be  used  to 
improve  reliability  performance.  One  alternative  is  to  change 
the  station  configuration  and  this  may  Increase  the  number  of 
ground  stations.  This  corresponds  to  the  Improvement  of  system 
reliability  through  ground  station  redundancies.  The  other 
alternative  Is  to  Increase  the  reliability  of  the  station  by 
adding  equipment  redundancies  (above  the  present  equipment 
configuration)  to  the  station,  subject  to  the  constraint  that 
some  equipment  such  as  transmitting  antenna  should  not  be 
duplicated  at  a  station  site  due  to  Interference 
considerations.  These  two  alternatives  will  be  analyzed  b /  the 
analytical  technique  presented  In  this  paper. 
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